General
- Target 2026-07-18_71b2261d99444ab59c9ac7f4e3bc6af4_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- Sample260718-bca52aa19n
- SHA256 0f7f1b49b2ce952960993fa0a01764244efc66e49647a32a41d6ecc5ff390819
- MD5 71b2261d99444ab59c9ac7f4e3bc6af4
- SHA1 e962fb8c9011aa45c198aca87bc04a6cdeeb8197
- SHA512 4030e4c4b4dbe9e93dc5c07d6a207447a2155efdee68fbeb1d89eccdc8634c88a9ec9dc00043e3bd1b901889baa85bb23e012176bae2901567164cd488205464
- SSDEEP 98304:RQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVT:CeGZF6bUpMBF1p/kjRm4OWi2bn
- TLSH T1F966331AAC864276C233183788B2D6712E693AF60F2D54174FD51B3F1B725A07E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_71b2261d99444ab59c9ac7f4e3bc6af4_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_71b2261d99444ab59c9ac7f4e3bc6af4_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_71b2261d99444ab59c9ac7f4e3bc6af4_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 6.2MB
- SHA256 0f7f1b49b2ce952960993fa0a01764244efc66e49647a32a41d6ecc5ff390819
- MD5 71b2261d99444ab59c9ac7f4e3bc6af4
- SHA1 e962fb8c9011aa45c198aca87bc04a6cdeeb8197
- SHA512 4030e4c4b4dbe9e93dc5c07d6a207447a2155efdee68fbeb1d89eccdc8634c88a9ec9dc00043e3bd1b901889baa85bb23e012176bae2901567164cd488205464
- SSDEEP 98304:RQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22ImljBVT:CeGZF6bUpMBF1p/kjRm4OWi2bn
- TLSH T1F966331AAC864276C233183788B2D6712E693AF60F2D54174FD51B3F1B725A07E2F8B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory